View Full Version : I NEED HELP WITH DAMN POP-UPs!!!


thecurly1
04-05-02, 06:53 PM
For the past month or two no matter what website I have traveled to my browser keeps opening up about six ad's (all casinos for some odd reason) at once. I have lamely tried to delete cookies and other things but to no avail. The only thing preventing them from coming up is a trial softwear anti-pop-up download.

Does anyone know how to stop these things from coming up? Did they plant a virus on my comp? Please help me.

Stryder
04-05-02, 07:01 PM
It's pretty hard to say what the matter is without rooting through your computer looking for the cause. If you have deleted the cookies kept in both the Temporary internet folder, and the cookies folder often located in windows, then it only leaves a few other possibilities.

1: is the possibly use of a trojan, or a method used in trojans that places a execution within your H_Keys. (in this case the execution would be a window, it's size and the URL to link to)

2: Somebody sneaky has rigged your browser to use PROXIES. If your connecting to the internet and your browser is running through such a proxy it's easy for anyone to see what you are doing, since you are basically using their system as a gateway.
(if they place an advert on such a proxy system, then thats the reason why)

If you really get stuck and think that some clandenstine module is loading up with windows, then you should check out www.mlin.net notibly, Windows startup CPL (You can decide what starts up with a tickbox, the program can turn off spyware and even speed your computer up by turning off modules you don't use)

Hope that helps.

thecurly1
04-05-02, 08:11 PM
Gracias, Stryderunknown. Two little questions.

1) Would running an anti-virus program bite the trojan?

2) Proxies sound familar. How and where on Microsoft Internet Explorer could I fix the settings?

Rick
04-05-02, 08:15 PM
Hi,
Why dont you try this site:
http://blacksun.box.sk/tutorials.html
(i think it has answers to your querries there.)...



bye!

Avatar
04-06-02, 04:26 PM
once I got this weird thing tht everytime there was a page not found (i think it was error 404) I got redirected to some pesky commercial search engine. I have double firewalls , how did tht get in my pc. Unfortunately I wasn't running AVP @ the moment:( Anyway I deleted all cookies, history, looked through my registry (the damn thing is sooo big) and found kinda nothing (I may have missed it in registry although, it is large and these thing often name themselves simmilar to some windows or IE keys) There were other problems, so I chose to format C:/U:D
it helped btw;):D

odin
04-06-02, 06:43 PM
Go here to get rid of trojans ect realy good.
http://housecall.antivirus.com/housecall/start_corp.asp

Stryder
04-07-02, 06:42 PM
Just incase the others haven't pointed out locations to aid.

www.virushelp.org

Try here for small standalone applications for removing renound trojan warez.

Viewing/Changing Proxy settings in Internet Explorer
<HR>
Brief Description of Proxy:
The term proxy is used when someone or something is acting on behalf of another. In this instance Internet Explorer can be set-up to use a "Gateway" computer (Terming not brandname) to access the internet through either a port mapper or a Proxy server.

The usual instance of this use is when someone has a LAN (Local Area Network) with more than one machine that wants to Share a connection through a firewall, or single modem.

Internet Explorer can be configured to the proxy machines IP in your LAN and communicate with the internet.

<HR>
As for the change of proxies for Internet Explorer (Should be the same for 5.x and 6.x)

Open a (IE) browser window, move the mouse to the command menu bar along the top of the screen and select Tools, scroll down the drop-down menu to Internet Options.

(this might be found in a different drop-down menu on one of the earlier versions of internet explorer)

When you have the Internet Options window open, choose the Connection Tabs
Below the Dialup connections there will be either Local Area Network (LAN) Settings or Proxy settings (I think that's the different termings for different versions)

When you click that settings button you need to make sure that your computer configuration is set to Automatically Configure.

---- The following you only need to change if your computer is connected to a LAN. ----

This is just a guide of where to look, a picture should be attached to this post to show you what the window should look similar to, when you ok/apply your settings.


Tick the Use Proxies box and then the Bypass proxy server for local addresses. (If any IP or port numbers exist in the other boxes, they probably shouldn't be there unless they are apart of your LAN network. The area's coloured RED should be BLANK.)

You should be able to click the Advanced button, This configuration window is where you can configure your individual services and what port they should be using. (Notibly a Port Mapper is used for ones that don't have boxes to contain their values.)

Your system if it's a standalone shouldn't contain any IP or Port numbers in any of those boxes. (In fact you should make sure they are all blank) and apply that configuration.

Xelios
04-07-02, 10:50 PM
It could also be spyware programs, they sometimes pop up ads. To detect and delete these programs download and install Ad-Aware (search for it on Google.com).

If you can't figure it out, and the popups are getting really annoying, get onto KaZaA or Morpheus and look for Meaya's Popup Ad Filter, download it, then download the crack for it. It will block almost all ad windows from popping up altogether.

thecurly1
04-08-02, 06:46 PM
Thank you all for helping me, I'm running anti-virus stuff and fixing my proxy settings. I hope this works, mucho gracias.

G0D
04-12-02, 01:24 PM
Simplest way -

If you use IE -

Tools - Internet options - Security - Custom level

Near the bottom, there is an option for "Active scripting" - check the "disable active scripting".

That's it! No messing around with popupkillers, AV programs etc.

Disadvantages - some sites will not work, prominently hotmail and plenty of domain name search engines.

;)

Stryder
04-12-02, 01:39 PM
If your going to go to that trouble you might as well make sure that you haven't installed WINDOWS SCRIPT HOSTING. If you have that installed as an optional package, it allows VB (Visual Basic) scripts to be run on your system, with WINDOWS SCRIPT HOSTING removed from your system, even internet worms known for sending files to everyone on your mailing list will not work.

(You can remove it by Start -> Settings -> Control Panel -> Add/Remove Programs -> Windows Setup -> Accessories - > Untick WINDOWS SCRIPT HOSTING. to remove it.)

[Script hosting was really meant for networks, not individual machines and thus to a person that knows no better a flaw waiting to happen]

thecurly1
04-12-02, 02:42 PM
Thanks, I disabled the script, I hope it works. Thanks to everyone.

Rick
04-12-02, 11:32 PM
Hi,
why dont you take a peep at Stryder's own site.he has given some kool tutorials...:cool:


bye!

jsxz1999
04-13-02, 07:01 AM
Try what the others said but you should also check out a setting within your IE. Check your IE's start page (homepage). Make sure it is the same as you have setted up before, or try using a new start page, Google for example.

Reid
04-16-02, 05:35 AM
Hi

Here's a tip how to avoid banners to speed up pageloading if you have a slow connection or if your just sick of those Flash ads

Startup your own webserver, IIS can be found on your Win2k CD

Open up this file:
%windir%\SYSTEM32\DRIVERS\etc\hosts
It's like your own DNS where you can add an IP for a URL

In this file, add sites like these

127.0.0.1 doubleclick.net
127.0.0.1 doubleclick.com
127.0.0.1 adhostcenter.com
127.0.0.1 adtrade.net
127.0.0.1 www.adcycle.com
127.0.0.1 advertising.com
127.0.0.1 servedby.advertising.com
127.0.0.1 commission-junction.com
127.0.0.1 dayrates.com
127.0.0.1 ad-flow.com
127.0.0.1 ads.ad-flow.com
127.0.0.1 popuptraffic.com
127.0.0.1 fastclick.com
127.0.0.1 fastclick.net

To find more you can rightclick a banner and choose copy shortcut to see what company servs the ad

Now if a site is trying to load a banner from doubleclick it will contact 127.0.0.1 (your own computer) and as you got a webserver running you will get a 400 Error, couldnt find page
I have this replaced with a new html page with just a black background with the text "No thanks"

goofyfish
04-16-02, 07:10 AM
Run Microsoft's web server? Not me, thanks.

Microsoft has released a critical update patch (http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/ms02-018.asp) that fixes 10 newly discovered security problems with IIS Web servers running on Windows XP, Windows 2000, and Windows NT 4.0., Ten new vulnerabilities, the most serious of which could enable code of an attacker’s choice to be run on a server.

"If you are operating a Web site, a recently identified security vulnerability could allow an attacker to take over your computer," a Microsoft release reads. "The attacker could then do anything that you can do, such as change Web pages, install and run software, or reformat the hard drive. Even rarely visited Web sites could be attacked via a virus or worm."

This Security Bulletin was released effective April 10, 2002.
Who knows what else will be discovered as Bill continues
his "Buy It & Beta Test It" software marketing program.

Welcome to SciForums, Reid!

Peace.

Reid
04-16-02, 11:58 AM
Welcome to SciForums, Reid!

Thanks!

Well the tip works without running a webserver, it will give you the standard Error 400 Cant find page

goofyfish
04-17-02, 08:30 AM
I have been using The Proxomitron ( http://www.flaaten.dk/prox/ ) for over a year now, with no adverse effects.
What's it cost?

Nothing - It's Free...
This isn't demo-ware! It's fully functional with no nag screens or time limits - use it as often as you like for as long as you like. Released as ShonenWare, you can support the program's future development by purchasing any album by the female, Japanese power-trio Shonen Knife! They are an amazing band who's music I dearly love. By supporting them you not only make me happier, but can perhaps help make the entire world a happier place!This little proxy filters the way your browser views HTML code and helps your browser block JavaScript, disable tables and background images, and replace banners with alternate graphics or text. It basically replaces the HTML of the page that you're viewing with alternate code, and includes an editor to alter the supplied filters or create your own. Good stuff.

Peace.

alexa
06-18-02, 11:01 AM
Hi thecurly1, I am having exactly the same problem with my PC almost everytime I load up IE I get a bloody pop up for a Casino or something similar, I think there must be a hidden application somewhere on my pc that is causing this problem. Like you I have deleted all of my cookies but still get the problem. It happens even when I go to internal websites so I know that the problem is not to do with the websites that Iam going to.

I noticed a program appeared once called Vegas palms casino but I uninstalled it. This seemed to install itself after installing GetRight. Maybe there is no connection but the Casino theme seems to suggest they are connected.

If you managed to fix the problem please let me know how, feel free to email me, I am going to continue investigating so if I get any further I will post backon here.

Adam
06-18-02, 11:06 AM
Welcome to sciforums Alexa! :)

alexa
06-18-02, 11:25 AM
Hi Adam, Thanks for the welcome, I have found some very useful info which I hope should fix the problem. For anyone interested the link to try is...

http://and.doxdesk.com/parasite/NetworkEssentials.html

~The_Chosen~
06-23-02, 02:45 AM
GET ZONE ALARM

It protects your comp from unauthorizes access also. Pop-ups will be no problem. It's the best program to firewall shit out of your cmop.